fix /inbox for Relay

lib/pleroma/object/fetcher.ex

@@ -117,9 +117,7 @@ defp maybe_date_fetch(headers, date) do
   def fetch_and_contain_remote_object_from_id(id) when is_binary(id) do
     Logger.info("Fetching object #{id} via AP")
 
-    date =
+    date = Pleroma.Signature.signed_date()
-      NaiveDateTime.utc_now()
-      |> Timex.format!("{WDshort}, {0D} {Mshort} {YYYY} {h24}:{m}:{s} GMT")
 
     headers =
       [{:Accept, "application/activity+json"}]

lib/pleroma/signature.ex

@@ -53,4 +53,10 @@ def sign(%User{} = user, headers) do
       HTTPSignatures.sign(private_key, user.ap_id <> "#main-key", headers)
     end
   end
+
+  def signed_date, do: signed_date(NaiveDateTime.utc_now())
+
+  def signed_date(%NaiveDateTime{} = date) do
+    Timex.format!(date, "{WDshort}, {0D} {Mshort} {YYYY} {h24}:{m}:{s} GMT")
+  end
 end

lib/pleroma/web/activity_pub/publisher.ex

@@ -50,9 +50,7 @@ def publish_one(%{inbox: inbox, json: json, actor: %User{} = actor, id: id} = pa
 
     digest = "SHA-256=" <> (:crypto.hash(:sha256, json) |> Base.encode64())
 
-    date =
+    date = Pleroma.Signature.signed_date()
-      NaiveDateTime.utc_now()
-      |> Timex.format!("{WDshort}, {0D} {Mshort} {YYYY} {h24}:{m}:{s} GMT")
 
     signature =
       Pleroma.Signature.sign(actor, %{

lib/pleroma/web/router.ex

@@ -133,6 +133,10 @@ defmodule Pleroma.Web.Router do
     })
   end
 
+  pipeline :http_signature do
+    plug(Pleroma.Web.Plugs.HTTPSignaturePlug)
+  end
+
   scope "/api/pleroma", Pleroma.Web.TwitterAPI do
     pipe_through(:pleroma_api)
 
@@ -686,7 +690,11 @@ defmodule Pleroma.Web.Router do
     pipe_through(:ap_service_actor)
 
     get("/", ActivityPubController, :relay)
+
+    scope [] do
+      pipe_through(:http_signature)
       post("/inbox", ActivityPubController, :inbox)
+    end
 
     get("/following", ActivityPubController, :following, assigns: %{relay: true})
     get("/followers", ActivityPubController, :followers, assigns: %{relay: true})